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Abstract 

The axiom of choice ensures precisely that, in ZFC, every set is projective: that is, a 
projective object in the category of sets. In constructive ZF (CZF) the existence of enough 
projective sets has been discussed as an additional axiom taken from the interpretation of 
CZF in Martin-L6f 's intuitionistic type theory. On the other hand, every non-empty set 
is injective in classical ZF, which argument fails to work in CZF. The aim of this paper 
is to shed some light on the problem whether there are (enough) injective sets in CZF. 

We show that no two element set is injective unless the law of excluded middle is 
admitted for negated formulas, and that the axiom of power set is required for proving 
that "there are strongly enough injective sets" . The latter notion is abstracted from the 
singleton embedding into the power set, which ensures enough injectives both in every 
topos and in IZF. We further show that it is consistent with CZF to assume that the 
only injective sets are the singletons. In particular, assuming the consistency of CZF one 
cannot prove in CZF that there are enough injective sets. As a complement we revisit the 
duality between injective and projective sets from the point of view of intuitionistic type 
theory. 

1 Introduction 

What are injective objects good for? In abehan categories, injective resolutions are used to 
define and compute the right derived functors of a left exact covariant functor. A famous 
instance is the cohomology theory of sheaves, which has contributed to the setthng of Fermat's 
conjecture [15]. "A standard method is: Take a resolution, apply a covariant functor T 
. . . , take the [co]homology of the resulting [cojcomplex. This gives a connected sequence of 
functors, called the derived functors of T." [11, p. 389] 

To have injective resolutions one needs to have what is called enough injective objects: 
that is, every object can be embedded into an injective object. For the prime example of 
an abelian category, the category of abelian groups, ". . . the usual proof . . . consists of two 
major steps. First every abelian group is a subgroup of a divisible one. Second, all divisible 
abelian groups are injective. . . . the first step can be carried out in ZFA. . . . the second step 
is . . . equivalent to the axiom of choice." [H p. 340 

In ZFC the axiom of choice ensures precisely that every set is projective: that is, a 
projective object in the category of sets. In constructive ZF (CZF) [UElHj, the framework 
of the present note, the existence of enough projective sets has been discussed as an additional 
axiom. This presentation axiom is taken from the interpretation [1] of CZF in Martin-Lof's 
intuitionistic type theory ITT [13]. The dual notion of an injective set is trivial in ZF, where 



^ZFA denotes ZF with atoms. 
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a set is an injective object of the category of sets precisely when it is non-empty. In particular, 
there are enough injective sets in ZF, which argument will turn out to fail in CZF. 

More precisely, we will show that no two element set is injective unless the law of excluded 
middle is admitted for negated formulas; and that the axiom of power set is required for 
proving that "there are strongly enough injective sets". The latter notion is abstracted from 
the singleton embedding into the power set, which ensures enough injective objects in every 
topos [12^ IV. 10, Corollary 3] and likewise in the intuitionistic ZF (IZF) from [lOJ. We further 
give an argument that it is consistent with CZF to assume that the only injective sets are 
the singletons. In particular, assuming the consistency of CZF it cannot be proved in CZF 
that there are enough injective sets. As a complement we revisit the duality between injective 
and projective sets from ITT's perspective. 

2 Preliminaries 

2.1 Constructive Set Theories 

The framework of this paper is the constructive Zermelo-Fraenkel set theory (CZF) begun 
with [T]. While CZF is formulated in the same language as ZF, it is based on intuitionistic 
rather than classical logic; from CZF one arrives at ZF by adding the law of excluded middle. 
Moreover, the axiom of power set does not belong to CZF, for this theory is also intended to 
be predicative (in a generalised sense). 

In most of the paper we can work in CZF's fragment CZFq from [4J which has the fol- 
lowing set-theoretic axioms and axiom schemes: extensionality, pairing, union, replacement, 
restricted separation, strong infinity, and mathematical induction. All these principles will 
be recalled in the appendix. Apart from the different choice of the underlying logic, the basic 
set theory from [9l p. 36] is a fragment of ZF that plays a role roughly analogous to the 
one played by CZFq within CZF. In addition to CZFq, we sometimes need to assume the 
principle of relativised dependent choices (RDC) from [2]. 

The axiom scheme of restricted separation only allows separation by restricted formulas, 
in which every quantifier must be bounded by a set. If restricted separation and replacement 
are strengthened to full separation and collection, respectively, and the axiom of power set 
is allowed, then one obtains the intuitionistic Zermelo-Fraenkel set theory (IZF) initiated in 
|10j . Albeit of an impredicative nature, this IZF is still based on intuitionistic logic. 

A set S is inhabited if it has an element. If a set theory — such as CZF and IZF — is based 
on intuitionistic logic, "5 is inhabited" has to be distinguished from "5 is non-empty": the 
latter is the double negation of the former. For a similar reason we need to recall that a set 
X is detachable from a superset Y if membership to AT is a decidable predicate on Y: i.e., 

Vy € y (y e X V y ^ A) . 

A set E is discrete if any singleton subset is detachable from E or, equivalently, if equality is 
a decidable relation on E: that is, 

Vu, v£E{u = v\/Uy^v) . 

A set E is finitely enumerable if there is n € N and a surjective map from n to E. A set E 
is finite if E is in bijection to some n € N, which uniquely determined n is the cardinality of 
E. A set E is finite if and only if it is finitely enumerable and discrete. 

For more details we refer to [HUE]. We assume that every map between sets is a set. 
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2.2 Injective Maps and Sets 



By an embedding we understand an injective map. Given a subset U of a set V, the inclusion 
U ^ V is an embedding. Every embedding is the composition of a bijection followed by an 
inclusion. We say that 

— a set E is injective if every map with codomain E can be extended to any superset of 
its domain; 

— there are enough injective sets if every set is the domain of an embedding whose 
codomain is an injective set. 

An object ii^ of a category is called injective if, given a monomorphism X ^ Y, every mor- 
phism from X to E can be extended to a morphism from Y to E. Since the (mono)morphisms 
in the category of sets are precisely the (injective) maps, a set is injective if and only if it is an 
injective object in the category of sets; whence there are enough injective sets if and only if 
the category of sets has enough injective objects. In particular, the notion of an injective set 
is a structural notion: that is, given any bijection between two sets, if one of them is injective, 
then so is the other. 

A set X is said to be a retract of a superset Y if the inclusion i : X ^Y has a left inverse: 
i.e., a map r '.Y ^ X with ri = idx- Clearly, an inhabited set X is a retract of any superset 
Y from which X is detachable, in which case every map from X to a set E can be extended 
to Y. In this sense, an inhabited set E is injective with respect to inclusions X ^ Y of 
detachable subsets. Apart from this, the following fragments of ZF's property "the injective 
sets are precisely the non-empty sets" remain valid in CZF. 

Lemma 1 Every singleton set is injective, and every injective set is inhabited. 

Proof. Clearly every map to a singleton can be extended to any superset of its domain. If 
E is an injective set, then the one and only map from to S can be extended to a map from 
1 to -E; whence E is inhabited, q.e.d. 

The counterpart of the subsequent lemma holds in any category. 

Lemma 2 An injective set is a retract of any given superset, and every retract of an injective 
set is injective. 

Let X be a set. An E-partition of X is a family, indexed by E, of pairwise disjoint subsets 
whose union equals X. An E^-partition (Yg)^^^ of a set Y with X (^Y is an extension of an 
£;-partition {Xe)^^^ of X if Xe C Ye for all ee E. 

The next lemma is clear from the obvious one-to-one correspondence between maps from 
X to E and i?-partitions of X, which in the context of CZF has proved useful before [3l[5l[8]. 

Lemma 3 A set E is injective precisely when, for any pair of sets X (^Y , every E-partition 
of X can be extended to an E-partition ofY. 

Finite products of injective sets are injective. We next give a partial dual. 

Lemma 4 Let I be a finite set, and {Ei)-^j an I -partition of a set E. If I is injective, and 
Ei is an injective set for every i ^ I, then E is injective. 
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Proof. Let X C y be sets, and f : X —?■ E a map. We use Lemma[3l Since / is injective, the 
/-partition (Xj)-^^ of X defined by Xi = f^^ (Ei) can be extended to an /-partition (l^Oig/ 
of Y. For each i G I the map X^ — )■ Ei induced by / can be extended to a map g'j : — )■ E^, 
because Ei is injective. Now the gi with i € / define a map g : Y ^ E that extends /. q.e.d. 

In the case of an arbitrary index set / one would need to invoke the axiom of choice to choose 
for every z € / an extension g^ of /j. In CZF, however, choice functions on finite sets can be 
defined as usual. 



3 Injective Sets and Excluded Middle 

For every subset p of 1 it is plain that 

p = o ^p, 

p = I Dep. 

If (/? is a restricted formula, then 

Pip = {0 : ip} = {x e I : ip} 

is a subset of 1, for which 

ip O O p^ = l, 

^ip O Q ip^ o p^ = 0. 

The Law of Restricted (Weak) Excluded Middle, for short R(W)EM, says that (p V ^p (re- 
spectively, V holds for every restricted formula ip. 

Proposition 5 Each of the following is equivalent to REM; 



1. Every inhabited set is injective. 

2. Every inhabited set is a retract of any given superset. 



Proof. To see that REM implies the first item, let E be an inhabited set, and take any 
e & E. To show that E is injective, let y be a superset of the set X. With REM one can 
decide whether any given element of Y belongs to X. Hence every f : X ^ E can be extended 
to g -.Y ^ E hy setting g{y) = f{y) if y G y and g{y) = e\iy ^X. 

By Lemma [2] the first item implies the second. To verify that REM follows from the 
second item, let phe a, restricted formula and consider X = p^pU {1} as a subset of 2. If there 
is a map r : 2 — )■ X whose restriction to X is the identity on X, then r(l) = 1 but 

r(0) = OoOGXoOGp^O(^. 

In particular, we can decide (/?, for by X C 2 we can decide r(0) = 0. q.e.d. 



Lemma 6 // there is an injective set E that has an element xq such that 

yx € E {x = xq y X ^ xq) 
and for which there is xi & E with xq x\, then RWEM holds. 
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Proof. Suppose that E is a set as in the hypothesis. We may assume that xq = and 
xi = 1. Let be a restricted formula, and set p = Pip. Since E is injective, there is a map 
5 : 2 U {p} — >■ which extends the inclusion 2 ^ E. In particular, g (0) = and g (1) = 1. 
We now consider the element x = g (p) oi E, for which 

p = o X = . 

(If p = 0, then clearly x = 0, because g (0) = 0. Conversely, if x = 0, then ^ p, i.e. p = 0, 
for if G p, then p = 1 and thus x = 1, because g (1) = 1.) By assumption, x = V x 7^ or, 
equivalently, p = V p / 0, which is to say that ^tp V -1-199 . q.e.d. 

In other words, RWEM follows from the statement that every singleton S can be embedded 
into an injective set E such that the image of S is detachable from E and has inhabited 
complement. 

Corollary 7 If -iRWEM, then for any injective set E and every xq £ E such that 

Vx € -E (x = Xq V X / Xo) 

there is no xi € E with xi 7^ xq • 

In other words, -iRWEM implies that any given injective set is almost a singleton set: that 
is, it has a singleton subset (Lemma [1]), and every detachable singleton subset has empty 
complement. 

Theorem 8 Each of the following is equivalent to RWEM.' 

1. The set 2 is injective. 

2. Every disjoint union of n ^ 2 injective sets is injective. 

3. Every finite set of cardinality ^ 2 is injective. 

4. There is a discrete injective set E with ^ 2 elements. 

Proof. Using Lemma [3] we first show that in the presence of RWEM the set 2 is injective. 
Let X C y be sets. If {Xo,Xi) is a 2-partition of X, then the subsets 

Yo = {yeY -.^{y^^ Xi)} , = {y e Y : {y e Xi)} 

of Y form, by RWEM, a 2-partition of Y. 

To deduce the second item from the first, let 2 be injective. By induction on n it suffices 
to prove that if Eq, Ei are disjoint injective sets, then £"0 U Ei is injective, which is a special 
case of Lemma m It is plain that item 2 implies item 3; that item 1 follows from item 3; and 
that item 1 implies item 4. Finally, RWEM follows from item 4 by Lemma [6j q.e.d. 

By Lemma m if N is injective, then so is every n G N; and if n G N is injective, then so is 
every m € n. 

According to [7] the General Uniformity Principle 

Vx3y G aif (x, y) — )• 3y G a\/xip (x, y) 

is consistent with CZF. 
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Theorem 9 The general uniformity principle implies that the only injective sets are the 
singletons. 

Proof. In view of Lemma [J it remains to show that if E is an injective set, and u,v (z E, 
then u = V. (A set of this kind wih later be cahed a subsingleton, see Proposition [15] below.) 
Let X be an arbitrary set, and let ~ be the equivalence relation on 3 = {0, 1, 2} defined by 

0~lo_L; 0'-2f^0Gx; 1 ~ 2 ^ x . 

The inclusion 2—7-3 followed by the projection 3 — > 3/ ~ gives an embedding 2 — )■ 3/ ~; 
whence by the assumption that E is an injective set the map f : 2 ^ E defined by f (0) = u 
and / (1) = V can be extended to a map g : 3/ E. Now there is y (z E (for example, the 
image under g of the equivalence class of 2 € 3) for which ip (x, y) holds where 

(/9 (x, y) = (0 G X — )• 2/ = n) A (0 ^ x ^ y = f ) . 

In all, we have \/x3y € E(p {x,y); whence by the general uniformity principle there is y (z E 
such that if {x, y) for every x. By using this for any such y G E, and for x = 1 and x = 0, we 
arrive at y = u and y = v, respectively; whence u = v. q.e.d. 

Corollary 10 It is consistent with CZF to assume that the only injective sets are the sin- 
gletons. In particular, under the assumption that CZF be consistent it cannot be proved in 
CZF that there are enough injective sets. 

Does "the only injective sets are the singletons" have any other interesting consequences? 
Theorem 11 Assume RDC. If 2 is injective, then N is injective. 

Proof. We again use Lemma [3l Let X CY he sets, and an N-partition of X. Set 

X^ = Um>n for each n G N. Note that 

— {Xo,X'q) is a 2-partition of X; 

— {Xn+i, X'^^-^) is a 2-partition of X^ for every n G N. 

Now suppose that 2 is injective. We notice the following immediate consequences: 

— There is a 2-partition (105^0) °f ^ that extends {Xq,Xq). 

— For each n G N, given any superset of there is a 2-partition (Yn+i,Y^^-^^) of Y^ 
that extends (Xn+i, X^^-^^). 

With RDC at hand we can choose a sequence of pairs {Yn,Y^)n£N of subsets of Y such that 

— (lo)^o) is ^ 2-partition of Y that extends {Xq,Xq); 

— (y„+i, y^_^-^) is a 2-partition of Y^ that extends (Xn+i, X'^^-^) for every n G N. 

In particular, we have an N-partition (yn)„gN ^ that extends (Xn)„gjsj. Q.e.d. 
With Theorem [8] we have the following. 

Corollary 12 //RDC is assumed, then N is injective if and only i/RWEM holds. 
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4 Strong Inject ivity and Power Set 



It is well known that in IZF there still are enough injective sets, because every power class 
is an injective set. An analysis of the proof has prompted the following considerations, for 
which we need to assume that many a set consists of sets, as is the case for all sets in CZF. 

As usual we write V (E) for the power class of a set E. The axiom of power set is 
equivalent, in CZFq plus the axiom of exponentiation, to the statement that V (1) is a set: 
by exponentiation, if V (1) is a set, then so is V (Z) = V (1)^ for every set Z. Needless to 
say, V (1) is a set already if the power class of an arbitrary singleton is a set. 

Lemma 13 Let S and s be sets. If S C {s}, then [JSCs, and [JS = s precisely when 
S = {s}. 

We say that a set S" is a suhsingleton if S" is a subset of {s} for some set s. 
Lemma 14 Every set can he mapped onto a suhsingleton set. 

Proof. Every set is the domain of a mapping whose codomain is any singleton set. q.e.d. 

We write Vi {E) for the class of suhsingleton subsets of E. While Vi (0) = V (0) is a set, 
Vi (1) = V (1) and thus Vi {E) for any inhabited set E are proper classes unless the axiom 
of power set is assumed. 

Proposition 15 The following are equivalent for any set S: 

1. S is a suhsingleton. 

2. X = y for all x,y G S. 

3. S is a suhset of {\J S}. 

4. Every mapping with domain S is an embedding . 

In particular, Vi (E) is closed under forming subsets and under taking images: every subset 
of a suhsingleton is a suhsingleton; and ii f : X ^ E is a map between sets, then / (S) is a 
suhsingleton for any suhsingleton S with S Q X. 

We say that a set E of set^ is Vi-complete if |J 5 € -E for every S £ Vi [E). The prime 
examples are the power sets: if Z is a set such that V (Z) is a set, then V (Z) is Pi-complete. 
In particular, 1 = P (0) is a "Pi-complete set. 

Corollary 16 A set E of sets is Vi-complete if and only if [J f {S) G E whenever X is a 
set, f : X ^ E a map, and S € Vi (X). 

Proposition 17 Let E be a set of sets. If f : X ^ E is a map between sets, Y a superset of 
X , and y , then the set 

fiy) = [J{fix) -.xeiyjox} 

possesses the following properties: 

■^That is is a set of sets is required whenever atoms are allowed in the set theory under consideration. 
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1. IfyiX, thenf{y)=0; 

2. IfyeX, thenf{y) = f{y); 

3. If E is Vi-complete, then f (y) € E. 

4- If E is Vi-complete, then f '.Y ^ E extends f. 

5. If h : Y ^ E extends f , then f (y) h (y). 

Proof. Part 1 is obvious. Part 2. If y € X, then {y} DX = {y}. Part 3. For every set y the 
subset {y} n X of X is a subsingleton. Part 4 is an immediate consequence of parts 2 and 3. 
Part 5. Let y GY. If z G / (y), then z £ f (x) for some x € {y} D X, for which / (x) = h{y). 
Q.E.D. 

The fohowing is best seen in the Ught of Lemma [TJ 

Corollary 18 If E is a Vi~complete set, then € i?, and E is injective. 

Proof. Let -E be a Pi-complete set. To see that G E, apply parts 1 and 3 of Proposition 
[TTlto X = 0, Y = 1, and y = 0; as for E being injective, use parts 3 and 4. q.e.d. 

In particular, 1 is the only Pi-complete subsingleton. Hence there are plenty of injective 
sets which are not Pi-complete (e.g., the singletons different from 1); and 'Pi-completeness 
is — unlike injectivity — not a structural notion. With this warning we say that 

— an embedding i : U ^ V sets is a strong embedding if i{x) is a singleton for every 
X €U; 

— there are strongly enough injective sets if each set is the domain of a strong embedding 
whose codomain is a 'Pi-complete set. 

Every strong embedding / : X — t- y is an embedding; whence if there are strongly enough 
injective sets, then there are enough injective sets. 

The following prime example of a strong embedding follows the proof that every topos 
has enough injective objects [IH IV. 10, Corollary 3]. 

Example 19 Let Z be a set. IfV{Z) is a set, then the singleton embedding 

Z^V{Z), z^{z} 
is a strong embedding, and V {Z) is Vi -complete. 
In particular, there are (strongly) enough injective sets in IZF. 

Lemma 20 If there is a Vi-complete set some element of which is inhabited, then 'P(l) is 
a set. 
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Proof. Let E he a T^i-complete set, and x G Y & E. For each p {!) set 

Yp = {y £Y -.0 £p}, Sp = {Z e E : Z = Y AO £p}. 
The fohowing assertions are readily seen to be equivalent: 

£ p; Yp = Y; x G Yp] Yp is inhabited; Sp = {Y} ; Sp is inhabited. 
Since Yp = [j Sp and Sp G Vi (E), we have Yp G E. In other words, 

F = {Yp -.peril)} 

is a subclass of the set E. Moreover, 

F = {Z £ E : Z CY A^y eY{y £ Z ^ X e Z)}; (1) 

whence i*" is a set by restricted separation. (To see the part ^ of ([1]), let Z belong to the 
right-hand side. Set p = p^ where ip stands for any of the following equivalent assertions: 

Z = Y; X £ Z; Z is inhabited. 

In particular, G p is tantamount to any of these assertions; whence Z = Yp for this p.) 

Also, for p, q £ V (1) , if Yp = Yq, then p = q. Hence for every Z £ F there is a uniquely 
determined p £ V (1) with Z = Yp; and "P (1) is a set by replacement, q.e.d. 

Theorem 21 With exponentiation, each of the following is equivalent to the axiom of power 



set: 






1. 


There are strongly enough injective sets. 




2. 


Every inhabited set can be strongly embedded into a Vi^complete 


set. 


3. 


Every singleton set can be strongly embedded into a Vi-complete 


set. 


4- 


The singleton set 1 can be strongly embedded into a Vi-complete 


set. 


5. 


There is a singleton set that can be strongly embedded into aVi- 


complete set. 


6. 


There is an inhabited set that can be strongly embedded into a Vi 


-complete set. 


1. 

8. 


There is a Vi -complete set some element of which is a singleton. 
There is a Vi -complete set some element of which is inhabited. 





Proof. Example [19] says that the first item follows from the axiom of power set, which in 
turn follows from the last item by way of Lemma [20l q.e.d. 

Although the singleton set 1 is Pi -complete, to give an embedding of 1 into a "Pi -complete 
set requires (Theorem 12 Ih the axiom of power set. Note in this context that the identity map 
on a set S fails to be a strong embedding unless S consists of singletons, in which case the 
inclusion of S into any superset is a strong embedding. Now the simplest example of a set 
consisting of singletons is {1}. By Corollarv 1181 however, there is no hope that {1} be Vi- 
complete, for it lacks the element 0. The inclusion of {1} into 2 is a strong embedding, and 
2 contains 0. But 2 cannot be Pi -complete unless RWEM holds (Theorem [8l Corollary USD . 
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Corollary 22 If the axiom of power set is false, then 1 is the only Vi-complete set. 

As we have noticed before, injectivity is a structural notion, whereas T^i-completeness 
lacks this property in general. This defect can be repaired by enriching the notion of Vi— 
completeness. We say that a pair {X, E) is a strongly injective structure, for short sis, if X 
is a set and S is a T'l -complete set of subsets of X such that \J E = X. As desired, sis is 
a structural notion. If X is a set such that ViX) is a set, then {X,'P{X)) is a sis. More 
generally, {X, T) is a sis whenever T is a set of subsets of a set X on which T is a topology. 

Remark 23 // {X, E) is a sis, then E and E is injective. 

Proposition 24 The following are equivalent for any set E of sets: 

1. E is Vi~complete. 

2. (U E, E) is a sis. 

3. There is a set X such that {X, E) is a sis. 

5 Injectivity versus Projectivity 

In intuitionistic type theory ITT [13j the notion of set is intensional so that, to represent 
extensional mathematics in ITT it is necessary to use the following representation of the sets 
and functions of extensional mathematics: 

R The sets of extensional mathematics are represented as setoids; i.e. structures [A, =a) 
consisting of a set A (in the sense of ITT) together with an equivalence relation =a on 
A. The functions of extensional mathematics are represented as maps between setoids 
that are required to respect the equivalence relations. 

Martin-Lof [14j argues that in ITT the axiom of choice is evident only for the intensional 
sets of ITT, but not the extensional setoids. He shows that, in ITT, the axiom of choice for 
setoids is equivalent to the law of excluded middle. 

When working in ITT we may refer to the sets of ITT as the intensional sets in contrast 
to the setoids which we may call the extensional sets. 

Let S be an intensional set, and =5 an equivalence relation on S. As any intensional set, 
S is also equipped with the finest equivalence relation Id^. We further have an extensional 
function if : {S,lds) — > {S, =s), defined by ip{s) = s, which respects equality just because Ids 
is the finest equivalence relation on S. It is clear that (p is surjective. This is why we have 
enough projective sets when whenever representation R is adopted. 

However, the "natural dual" of this construction does not imply that we have enough 
injective sets. Let x ~5 y be a binary relation defined so that it is always true (and vacuously 
an equivalence relation). Clearly, the extensional set {S, ~5) is a subsingleton. A construction 
dual, in a sense, to the one of ip above is the extensional function ip : {S, =5) {S, ^s), again 
defined by ipis) = s. Now if the intensional set S is inhabited, then the extensional set {S, ^s) 
is a singleton, and thus injective. However, there is no reason to believe that {S, ^s) can be 
generally proved to be injective. 

In all, with the representation R of extensional mathematics, the following two statements 
are dual to each other. 
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A Every set is the codomain of a surjective function from a projective set. 

B Every set is the domain of a surjective function to a subsingleton set. 

Both A and B are valid in ITT under representation R; more precisely, A is a consequence of 
ITT's axiom of choice for intensional sets. In CZF one can prove B (Remark I14p . whereas A 
is nothing but the axiom of presentation taken [2J from the interpretation of CZF in ITT. 

6 Appendix: The Axioms of CZFq 

The language of CZF is the first-order language of ZF with the non-logical symbols G and 
=. The logical symbols are all the intuitionistic operators _L, A, V, — 3, and V; in particular, 
-i(/9 is defined as ip ^_L. A formula of CZF is restricted or is a /S.Q~formula if all quantifiers 
occurring in it — if any — are bounded: that is, they are of the form 3x € ?/ or Vx € y, where 
3x G yip and \/x G y ip stand for 3x {x G y A ip) and Vx (x € y — > ip), respectively. As usual, 
X C y is a shorthand for Vz G x {z G y). 

In addition to the usual axioms for intuitionistic first-order logic with equality, the axioms 
of CZFq are the following seven set-theoretic axioms and axiom schemes. 

1. Extensionality 

Va V6 (a C 6 A 6 C a a = b) . 

2. Pairing 

\/a\/b3x\ly {y G X y = aV y = b) . 

3. Union 

\/a3x\/y {y G X o 3z G ay G z) . 

4. Replacement For every formula ip (x, y) in which b is not free., 

Va (Vx € a 3\y Lp{x, y) — )• 36 Vy (y € 6 o 3x € a (/?(x, y))) . 

5. Restricted Separation For every A^-formula ip{y) in which x is not free, 

VaBxVy (y G X -H- y S a A ip{y)) . 

6. Strong Infinity 

3x (Ind (x) A Vy (Ind (y) — > x C y)) , 
where the following abbreviations are used: 
Empty(y) for Mz G y -L ; 
Succ(y, z) for (u G z -ir^ u G y V u = y) ; 
Ind(x) for 3y € x Empty(y) A Vy G x £ x Succ(y, z) . 

The axiom of strong infinity ensures the existence of a least inductive set, which uniquely 
determined set is denoted by N. The empty set can be defined e.g. by restricted separation 
from N; and by extensionality y' = y U {y} is the one and only successor of each y € N. 
Hence the elements of N are = 0, 1 = {0}, 2 = {0,1}, etc. Together with restricted 
separation, strong infinity allows for proofs by induction of Ag-formulas; to have this for 
arbitrary formulas requires to adopt a further axiom scheme, which can be put as follows: 
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7. Mathematical Induction For every formula ip{x), 

V3(0) AVy gN {ip{y) ^ ip {y')) ^\fxenip{x) . 
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